This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xaMXBaAm_KK2-YeUg9b_VvGp6S0.roa File: xaMXBaAm_KK2-YeUg9b_VvGp6S0.roa (raw, json) Hash identifier: u5y1qt4idp44vYHBgK49C/C4rXbc1u2rsNfGaoujnM0= Subject key identifier: C5:A3:17:05:A0:26:FC:A2:B6:F9:87:94:83:D6:FF:56:F1:A9:E9:2D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8496EED508BEAC024FEC8B873AEA64 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xaMXBaAm_KK2-YeUg9b_VvGp6S0.roa Signing time: Fri 02 Jan 2026 16:22:34 +0000 ROA not before: Fri 02 Jan 2026 16:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204755 IP address blocks: 31.56.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:96:ee:d5:08:be:ac:02:4f:ec:8b:87:3a:ea:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5a31705a026fca2b6f9879483d6ff56f1a9e92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:88:aa:1c:8a:43:30:02:c5:b5:57:a2:dd: 74:b6:bd:fb:97:8c:b9:6b:ef:08:2a:74:82:97:2f: fb:09:46:c5:2d:b2:07:41:da:1d:30:7a:e2:f2:48: ae:3c:4b:38:cb:63:bd:b1:9b:39:0c:6c:46:e6:7e: ae:0b:62:9a:d7:e8:f4:9f:83:d5:ec:58:92:49:ef: 21:54:c4:44:41:fb:fb:8f:87:f3:6a:00:97:dd:37: 41:7a:12:89:d8:fd:eb:48:ac:c3:9a:ae:b4:06:bd: b9:ac:e5:fb:e9:b7:ad:f9:61:1f:08:95:7c:e4:5f: 7c:39:17:db:96:ee:4c:24:bc:65:b6:d3:eb:92:00: 1e:7a:37:91:3c:94:57:fb:a8:e9:df:c8:e9:b6:b7: 3c:d2:a3:95:fa:8f:27:93:5a:6e:a1:ca:f6:27:9f: 2b:b9:4b:66:2e:81:0c:2e:de:f8:ac:10:1d:65:f7: 1a:1c:b4:2b:3f:8c:ae:32:bf:61:3d:75:2f:c6:66: 5c:a9:c6:89:27:5c:88:ba:19:bd:ec:93:0d:a6:7a: 3f:dd:5e:57:66:02:c4:eb:a0:49:eb:4a:26:d8:24: b1:34:b7:ea:8a:f8:6f:66:d9:df:37:35:09:62:b2: 14:e3:ec:78:86:ee:e1:97:64:2e:c1:8a:78:c7:6b: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A3:17:05:A0:26:FC:A2:B6:F9:87:94:83:D6:FF:56:F1:A9:E9:2D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xaMXBaAm_KK2-YeUg9b_VvGp6S0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.110.0/24 Signature Algorithm: sha256WithRSAEncryption 23:d1:c4:04:1a:a0:de:f7:d5:a2:a3:c8:ba:f4:df:09:40:0c: 0b:26:a0:5c:33:22:65:66:07:3d:6f:b1:28:28:f2:7b:f0:ce: db:94:ce:fb:2d:63:f1:d0:bc:e2:fa:f2:de:be:9d:ce:6d:da: bf:5e:24:2c:f1:18:5b:e8:e9:21:ee:0d:7d:f5:81:50:ee:51: de:a2:cc:c5:3b:ac:3e:48:d8:63:2e:39:15:92:75:9c:cb:73: 3c:2e:02:8e:ea:4f:16:49:32:4a:3e:59:cc:bd:b7:2c:c1:0d: 71:78:b0:d6:02:44:2d:e9:7a:62:27:25:fe:d0:2f:c1:6f:6c: f5:9c:7e:59:d1:c7:20:d3:5e:38:33:82:36:8d:8a:1a:a2:c1: bb:82:bb:15:d9:78:60:8a:4c:ae:5e:df:42:07:82:b8:f8:1d: 90:9f:d1:28:50:96:b8:25:4c:cd:8a:23:61:b3:07:eb:1f:91: 21:91:a0:c9:19:00:c2:d6:f3:aa:e3:ee:e7:37:65:af:72:e7: ca:3f:86:22:d9:1d:c7:8d:6c:d2:56:f2:79:b1:28:56:c8:68: 12:89:59:b6:b7:3a:aa:93:2b:a2:a8:ef:17:7b:18:9b:b0:c3: ef:55:a0:45:15:bf:1d:21:1b:0f:cd:b5:2b:73:5b:93:da:1c: 50:a1:45:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJbu1Qi+rAJP7IuHOupkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWEzMTcwNWEwMjZmY2EyYjZmOTg3OTQ4M2Q2ZmY1NmYxYTllOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBGIqhyKQzACxbVXot10tr37l4y5 a+8IKnSCly/7CUbFLbIHQdodMHri8kiuPEs4y2O9sZs5DGxG5n6uC2Ka1+j0n4PV 7FiSSe8hVMREQfv7j4fzagCX3TdBehKJ2P3rSKzDmq60Br25rOX76bet+WEfCJV8 5F98ORfblu5MJLxlttPrkgAeejeRPJRX+6jp38jptrc80qOV+o8nk1puocr2J58r uUtmLoEMLt74rBAdZfcaHLQrP4yuMr9hPXUvxmZcqcaJJ1yIuhm97JMNpno/3V5X ZgLE66BJ60om2CSxNLfqivhvZtnfNzUJYrIU4+x4hu7hl2QuwYp4x2vVlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWjFwWgJvyitvmHlIPW/1bxqektMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveGFNWEJhQW1fS0syLVllVWc5Yl9WdkdwNlMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhuMA0G CSqGSIb3DQEBCwUAA4IBAQAj0cQEGqDe99Wio8i69N8JQAwLJqBcMyJlZgc9b7Eo KPJ78M7blM77LWPx0Lzi+vLevp3Obdq/XiQs8Rhb6Okh7g199YFQ7lHeoszFO6w+ SNhjLjkVknWcy3M8LgKO6k8WSTJKPlnMvbcswQ1xeLDWAkQt6XpiJyX+0C/Bb2z1 nH5Z0ccg0144M4I2jYoaosG7grsV2XhgikyuXt9CB4K4+B2Qn9EoUJa4JUzNiiNh swfrH5EhkaDJGQDC1vOq4+7nN2WvcufKP4Yi2R3HjWzSVvJ5sShWyGgSiVm2tzqq kyuiqO8XexibsMPvVaBFFb8dIRsPzbUrc1uT2hxQoUV6 -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:43 2026 by rpki-client